Admin and Site Enhancements (ASE) Pro vulnerabilities
1 known vulnerability in Admin and Site Enhancements (ASE) Pro from ASE. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
Admin and Site Enhancements (ASE) Pro: Unrestricted Upload of File with Dangerous Type
The Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.9.0 via the recursive_html function. This is due to the frontend save handler enforces only a publicly emitted nonce w